Juniper Networks Security Updates 12 January 2023

Juniper Networks has released security updates to address several vulnerabilities affecting multiple products.

Juniper Networks Junos OS and Junos OS Evolved are vulnerable to a denial of service.

The remote attacker could exploit some of these vulnerabilities to crash the application by sending a specially-crafted request.

Sample of the addressed vulnerabilities:

Juniper Networks Junos OS and Junos OS Evolved Denial of Service (CVE-2023-22406)

• CVSS: 7.5

• Attack Vector: Network

• Attack Complexity: Low

• Privileges Required: None

• User Interaction: None

• Consequences: Denial of Service

It should be highlighted that juniper addressed critical vulnerabilities in its security advisory belonging to Red Hat, Oracle, Open SSH, MySQL, Nginx, Apache, and other embedded libraries in juniper’s products, for more information kindly check the below link:

Juniper Networks “Critical Libraries Vulnerabilities”

Vulnerabilities
Mitigations

Mitigation sectionThe enterprise should deploy this patch as soon as the testing phase is completed.

Juniper Support Portal

References